Firewall blocking connexions via IPSec

joshYarnspinner · Post by **joshYarnspinner** » Fri Aug 28, 2015 8:17 am

Anyone?

jdubjr · Post by **jdubjr** » Fri Aug 28, 2015 8:30 pm

On the firewall, your port numbers look ok except for one. Double check they are the correct protocol too.

UDP - 500
UDP - 4500
TCP - 443
TCP - 992
TCP - 1194
TCP - 5555

Your symptoms sound like ports 500 and 4500 are not UDP.

joshYarnspinner · Post by **joshYarnspinner** » Fri Aug 28, 2015 10:29 pm

jdubjr wrote:
> On the firewall, your port numbers look ok except for one. Double check
> they are the correct protocol too.
>
> UDP - 500
> UDP - 4500
> TCP - 443
> TCP - 992
> TCP - 1194
> TCP - 5555
>
> Your symptoms sound like ports 500 and 4500 are not UDP.
They are all TCP/UDP

jdubjr · Post by **jdubjr** » Sat Aug 29, 2015 1:20 am

Have you tried setting the RPi as the DMZ host in your Super Hub 2?

jdubjr · Post by **jdubjr** » Sat Aug 29, 2015 1:45 am

One difference I see between your config and mine is I have:

bool L2TP_Raw false

I'm pretty sure you don't want that set to true. That would be an unencrypted connection.

joshYarnspinner · Post by **joshYarnspinner** » Sat Aug 29, 2015 7:20 am

jdubjr wrote:
> Have you tried setting the RPi as the DMZ host in your Super Hub 2?
Yes. Didn't work. Also the L2TP thing has been changed I don't think it affects whether I'm able to connect.

joshYarnspinner · Post by **joshYarnspinner** » Sun Aug 30, 2015 4:27 pm

Any other suggestions? I've checked and made sure all the ports are forwarded etc... also disabled the L2TP thing.

jdubjr · Post by **jdubjr** » Mon Aug 31, 2015 1:08 am

Any clues in the packet logs on the VPN server? If not, I would do a wireshark capture next.

jdubjr · Post by **jdubjr** » Mon Aug 31, 2015 7:31 pm

Seen this tutorial?

http://tomearp.blogspot.com/2013/11/set ... ether.html

joshYarnspinner · Post by **joshYarnspinner** » Mon Aug 31, 2015 7:39 pm

jdubjr wrote:
> Seen this tutorial?
>
>
> http://tomearp.blogspot.com/2013/11/set ... ether.html

Yes, I followed it to set up the Pi. I'm attempting to get the logs out right now but I am not sure which ones to take out.

Post by **thisjun** » Thu Sep 10, 2015 7:46 am

Please show a log around connecting time.

joshYarnspinner · Post by **joshYarnspinner** » Sat Sep 26, 2015 3:53 pm

Post by **thisjun** » Thu Oct 08, 2015 8:27 am

In the log, user name "temporary_session" is used for auth.
Is it correct? Is there the user name on a RADIUS?

Firewall blocking connexions via IPSec

Firewall blocking connexions via IPSec

Re: Firewall blocking connexions via IPSec

Re: Firewall blocking connexions via IPSec

Re: Firewall blocking connexions via IPSec

Re: Firewall blocking connexions via IPSec

Re: Firewall blocking connexions via IPSec

Re: Firewall blocking connexions via IPSec

Re: Firewall blocking connexions via IPSec

Re: Firewall blocking connexions via IPSec

Re: Firewall blocking connexions via IPSec

Re: Firewall blocking connexions via IPSec

Re: Firewall blocking connexions via IPSec

Re: Firewall blocking connexions via IPSec

Re: Firewall blocking connexions via IPSec